Custom Filter for Failed Logon @ Server

Rating: No reviews yet
Downloads: 958
Released: Mar 5, 2009
Updated: Mar 5, 2009 by PhilipElder
Dev status: Stable Help Icon

Recommended Download

Source Code Failed Logons
source code, 1K, uploaded Mar 5, 2009 - 958 downloads

Release Notes

The attached XML will filter security events and show logon failures against the server, a locked session on the server, authentication attempts against the Remote Web Workplace, and others.

It is placed in the Custom Views folder of the Event Viewer in the SBS Native Tools Management console.

Process in the SBS Native Tools Management console:
1: Right click on the Event Viewer and click on Create Custom View.
2: Click on the XML tab.
3: Click the Edit query manually radio button.
4: Answer Yes to the warning.
5: Copy the XML code out of the attached file.
6: CTRL+V to paste it into the XML editor for the Create Custom View window.
7: Click OK.
8: Name the filter: Failed Logons.
9: You can choose a folder or create one to store your Custom Views.
10: Click OK.
11: OPTION: Right click on the new filter and "Attach Task To This Custom View..." to have the event generate an e-mail.

Reviews for this release

No reviews yet for this release.